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Abstract — This paper presents a method to merge Generalized 
Minimum Distance decoding of Reed-Solomon codes with the 
extended Euchdean algorithm. By merge, we mean that the steps 
taken to perform the Generalized Minimum Distance decoding 
are similar to those performed by the extended Euclidean 
algorithm. The resulting algorithm has a complexity of 0{n^). 

I. Introduction 

In 1996, Ralf Kotter presented a fast algorithm for Gener- 
alized Minimum Distance (GMD) decoding of Reed-Solomon 
(RS) codes with a complexity of 0{n'^) H]. This algorithm is 
an extension of the well-known Berlekamp-Massey algorithm 
(BMA), that has been applied to decoding of RS codes up to 
half the minimum distance since the late 1960s 121. Another 
algorithm that is often used to decode RS codes was first 
described by Sugiyama et. al. in 1975 lH, and is based 
on the extended Euclidean algorithm (EEA). Recently, there 
have been attempts to perform GMD decoding, also with a 
complexity of 0{n'^), using polynomials that are obtained 
from the extended Euclidean algorithm ||4|, ISj. Since the 
BMA and EEA are known to be equivalent in the decoding 
of RS codes up to half the minimum distance, it is interesting 
to try to find an extension to the EEA that is equivalent to 
Kotters extension to the BMA. In this paper, we present such 
an extension. 

The paper is organized as follows: In the next section, 
we shortly introduce RS codes as well as GMD decoding. 
In Section [nil we first recall the EEA and how it is used 
for decoding RS codes up to half the minimum distance. 
Then we show, which of polynomials obtained are used as 
a basis for the GMD extension, and how to extend the EEA 
to GMD decoding. Finally, we shortly discuss how to modify 
our approach so that the selection of the best solution does not 
decrease the complexity. The conclusion follows in Section IV] 

II. Notations and Definitions 

A. RS Codes and Key Equation 

To define an TZS{n,k,d) code over GF{q) with R = ^ 
and minimum distance d = n — k + 1, let a G GF{q) denote 
an element of order n, and the jth power of this element. 
Later, the elements ai will denote the ith element according 
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to a (implicitly) given indexing. A polynomial c{x) = cq + 
CiX + • • • + Cn-ix"^^ with coefficients in GF{q) is a valid 
codeword if the polynomial C{x), whose coefficients Cj are 
calculated by the discrete Fourier transform (DFT), i.e. 

Q = c(a^), j = 0,...,n-l, (1) 

is zero at the first n — k = d — 1 coefficients, hence 

= Q_ia;'*-i + --- + C„_ia;"-i. (2) 

We take the Ci € GF{q) to be the information symbols. 
The codeword c{x) corresponding to the information word 
G{x) is obtained through the inverse discrete Fourier transform 
(IDFT): 

Ci = 71-1 • C(a-'), j = o,...,n-l. (3) 

Throughout this paper, capital letters denote polynomials in 
the spectral domain, and small letters their correspondences 
in the time domain. 

The transmitted codeword is corrupted by an additive error 
e{x) of Hamming weight t, and the received word is r{x) = 
c{x) + e{x). For decoding, calculate the syndrome S{x): 

S{x) = R{x) mod x'^-i = E{x) mod x'^~^ . (4) 

This syndrome is used in the key equation for decoding RS 
codes; 

- n{x) = K{x) ■ S{x) mod x'^-'^, (5) 

with the error locator polynomial A(a;) and the error evaluator 
polynomial ^{x). These two polynomials satisfy the important 
degree relation: 

deg Q.{x) < deg A{x) = t. (6) 

B. GMD Decoding 

First proposed by Forney in 1966 |6], the idea of GMD 
decoding is to allow soft-decision decoding of algebraically 
decodable codes by performing m + 1 decoding trials, each 
with a different number of positions being erased. In each trial, 
the decoder may either output an error locator polynomial as 
defined in (|5]i, or declare a decoding failure. Consequently, 
a list of up to m + 1 candidate error locator polynomials is 
obtained, and the decoder should select one of these candidate 
words, that is best according to a certain criterion. 



In order to determine the set Xj of erased positions in 
iteration j, the decoder needs to be suppHed with reliability in- 
formation regarding the decisions made. ReUability is defined 
intuitively, i.e. the less reliable a decision, the more probable 
it is that the received value is incorrect. Therefore, the least 
reUable positions are erased first. It is known, cf. e.g. [[T], that 
decoding is possible if the number of errors t and the number 
of erasures e fulfill 

2t + e<d. (7) 

We choose \Xq\ =0 (i.e. we start with decoding errors only), 
I A"! I = 2, I ^"2 1 = 4, . . . , I A;„ I = 2 • [^J , and further require 
Xj C ^j+i. Before, A(a;) was defined to be an error locator 
polynomial. For our algorithm, we slightly modify this and 
take A(a;) to be a joint error-erasure locator polynomial. In 
each iteration of the GMD decoding process, we have two 
additional erasures. On the other hand, according to (|7]i we can 
correct one error less than in the iteration before, and so we 
find that the degree of our candidate error locator polynomial 
should increase by 1 in each iteration. Due to this fact, we 
state our decoding problem as follows: 

Problem 1 In each iteration of our GMD decoding, we want 
to find an error locator polynomial K{x), that fulfills dU and 
(|6]l, of a given degree with certain prescribed zeros. 

This is different to the problem statement of Kotter, where the 
polynomial of smallest degree is to be found. It will be seen 
later that in some situations, it is not possible to fulfill the 
requirements given in our problem statement. 

In "classical" GMD decoding, the iterations are independent 
of each other In each iteration, one first determines the erasure 
locator polynomial. Due to the erasures, the minimum distance 
of the RS code is virtually decreased, and the decoder tries to 
find an error locator from the shorter syndrome. Because the 
complexity of decoding with the EEA is 0{n^), the overall 
decoding complexity of this approach is 0{n^). However, the 
decoding complexity can be decreased if erasing of positions 
is performed incrementally, i.e. the decoding result of iteration 
j is used together with the additional erasures in Xj+i \ Xj 
to yield the decoding result of iteration j + 1. The first such 
method was presented in ([T], the complexity of his approach 
being 0{ii?) (actually, Kotter claims the complexity to be 
0{nd), but since in general d = 0{n), this is asymptotically 
the same). His algorithm is an extension of the BMA. How- 
ever, it is known that decoding up to [^^J with the BMA 
and the EEA are equivalent. Therefore, we want to show that 
it is possible to modify the EEA, such that GMD decoding is 
merged into the decoding process. 

III. The Extended Euclidean Algorithm 

The possibility of applying the EEA in the decoding of RS 
codes up to [^^J was first presented by Sugiyama et. al. in 
1975 13]. This decoding approach will be shortly reviewed in 
the first part of this section, as it is the basis for the extended 
decoding approach. 



In the second and third part of this section, we will present 
an algorithm that integrates GMD decoding into the EEA. At 
the end of the third part, we show how to combine the formulas 
given to form the algorithm. 

A. Decoding up to [^^j^J 

The EEA uses input polynomials A(x) = r''^\x) and 
B{x) ~ r^~^\x) to recursively calculate a series of quotient 
polynomials q^^~^^^ (x) and remainders r^^+^^ (a;) that fulfill: 

r(^'+i)(a;) ^ r''^-^\x) - q^^+^\x) ■ A^^x), (8) 

with deg A^^^^x) < deg A^\x). The algorithm stops when 
7^0+1) (^2;) = 0. From the quotient polynomials, a series 
of auxiliary polynomials u^^~^^'>{x) is obtained recursively, 
namely 

u(j'+i)(a;) = u^i-'^\x) - g(^'+i)(.T) • u^^^x), (9) 

where u^^^^x) — and = 1. The degrees of these 

auxiliary polynomials are given by 

i 

deg u'-^^x) ^J2'^^^ <l^'\x). (10) 

Further, these polynomials fulfill the relation 

u^^\x) ■ A{x) = A^^x) mod B{x), (11) 

which has a form similar to the key equation (|5]l. This implies 
that the EEA can be used for solving (|5]l. Hence by setting 
A{x) = S{x) and B{x) — x"^^^, in some steps of the EEA, 
whenever 

deg w(^')(a;) > deg r(^')(a;), (12) 

we obtain polynomials fulfilling both (|5]l and (|6]l. If the 
number of errors t, i.e. the number of nonzero coefficients 
in e{x), is limited hy t < [^^^J, then it is known lO that 
t = deg u^^^x), A(x) = u'-'^(x-) and fl{x) ~ — A^\x) where 
j is the smallest index for which (fT2] i is fulfilled. 

B. From Classical Decoding to GMD Extension 

In Is] it was shown that c^^~^^\ the number of coefficients 
of (x) that can be determined from the syndrome, is 

given by 

c'^'+^) = deg r'^') (x) ~ deg u^^'^ ix) + l. (13) 

Further, (O yields that 

deg (x) = deg r'^-^^ (x) - deg r^^'^ (x). (14) 

As long as deg q''^^^\x) + 1 < c'-'+^\ the quotient polyno- 
mials are calculated as in the classical decoding procedure. 
This can be done as long as deg q'-^^^\x) < [^-^\ H). If 
deg q^^~^^'>{x) + 1 > c^^^^\ we switch to the GMD extension 
described in the next paragraph. In order to set the initial 
polynomials for the extension, we have to distinguish two 
cases: If c'^+^-' < 0, then no coefficient of the next quotient 
polynomial can be determined. Hence, we use 

u^^\x) =: A'^^'°\x) and u'^^-^\x) =: A'^^'°\x). (15) 



On the other hand, if c^^+^^ > 0, then it is possible to 
determine the upmost c'-^+^' coefficients of q'-^^^'>{x) - we 
will call this part (j'^'(a;), because it belongs to the "quotient" 
polynomial determined in the first iteration of the GMD 
extension - and it would be unwise to discard this information. 
Simulations have shown, that the best performance is achieved 
if we set A(i'0)(a:) := u^^\x) and A^^'^^^x) := u^^^^\x) - 
q^^^ {x)u^^^x). Unfortunately, we do not know yet why this 
performs better than using the definitions in ( fTsT i and just 
taking q^^'>{x) into account only in the first iteration. 

C. GMD Extension 

In this section, we again use j to index the iterations done 
in the GMD part of our algorithm. However, we count those 
iterations independently of the ones performed by the EEA 
before. Because the decoding up to [^^J is just decoding 
without erasures, j now corresponds to the iterations defined 
in Section Hl-BI The basic idea is the following: We start with 
decoding up to half the minimum distance, as described before. 
Once the polynomials u^^\x) can no longer be determined 
by the syndrome and we switch to the GMD extension, the 
decoder starts to determine the "quotient" polynomials q^^^ [x) 
with the help of the reliability information given. Namely, two 
positions ai and a2 are erased in each iteration, where 

{ai,a2}^Xj+i\Xj. (16) 

Comparing (fTsl i to (|9]i, we set the equation to be solved by 
the GMD extension to be 

A(i J+i) (x) = J) [x) ~ q^J^ (x) A(i^^') (x). (17) 

Consequently, g^-'^ (x) is determined in such a way that 

A(i-''+i)(ai) = A(i^^+i)(a2) - 0. (18) 

Now, the polynomials A'^'(a;) take the role of u{x) in the 
classical decoding up to [^j^J , i.e. they form the list of 
candidate error locator polynomials from which the decoding 
result is chosen. Note that the erased positions in one iteration 
are always named ai and a2, there is no separate indication 
of the iteration. It should always be clear from the context, to 
which pair of positions the two variables refer 

As mentioned above, we want the degree of the polynomial 
A^^-* (x) to increase by one in each iteration. In order to ensure 
this degree, we force ai and a2 to be zeros of the polynomial 

^aA^^-^\x)-{x + b)-A^^^^\x). (19) 

Thus, we have a system of two linear equations and two 
unknowns, so we can give the general solution 

A(i'J)(ai)A(i'J)(a2)(ai - ^2) 
" ~ A(i'J)(ai)A(2j)(a2) - A(i'i)(a2)A(2.J)(ai) ' 

A(i'j)(ai)A(2^J")(a2)ai - A(i'J')(a2)A(2j)(ai)a2 
~ A(i.J)(ai)A(2j)(a2) - A(i^J)(a2)A(2j)(ai) ' 

(20) 

Because we do not require the polynomials to be monic, we 
can avoid the division in the actual implementation. However, 



for the analysis of the algorithm we prefer to use the formulas 
given as they provide the easier insight regarding the cases 
when the intended updating is not possible. 

Of course, A^^^{x) also needs to be updated to enforce the 
required zeros, since otherwise it will not be guaranteed in 
further iterations that A^^)(a;) still has zeros at all positions 
in the corresponding erasure set Xj. The updating of A^^'^lx) 
is performed by 

A(2 J+i) (x) = A(i'J') {x)-{a-x + b)- A(2 J) (x). (21) 

/\(ij)(a;) is multiplied by 1 because we want to have 
deg A(2j+i)(.t) = deg A(^''')(a;). This is derived from the 
fact that in (|9]l, the same auxiliary polynomial is used twice, 
once in the role of A(^^(a;) and in the next iteration in that of 
A(2)^2;). The correct zeros are obtained if 

_ A(^)(ai)A(2)(Q;2) - A(i)(a2)A(2)(Q;i) 
" " A(2)(ai)A(2)(a2)(ai-a2) ' 

A(i)(Q2)A(2)(ai)Qi - A(i)(ai)A(2)(Q2)a2 

" A(2)(«i)A(2)(«2)(«l -«2) ■ 

Updating according to these two rules will be called regular 
updating. It is directly seen, that the solutions in ( l20b and 
(l22l) do not always exist: Regular updating of A'^^) (x) is not 
possible if A(iJ)(ai)A(2j)(a2)-A(i'^)(a2)A(2.J)(ai) = 0. 
This happens if 

A(i'J)(ai) = A(i'^)(a2) =0 (23) 

or 

A(2'J)(ai) A(2j)(a2) = 0, (24) 

and rarely also in other cases when the terms in the de- 
nominator of ( I20I ) are all not zero, but the denominator is. 
For these cases, we allow the algorithm to update A'^^'(.t) 
in such a way that deg A<-^-^+^^x) ^ deg A<-^-^^x) + 1. 
However, we keep track of this process, and perform a 
compensation step in some later iteration j + jo such that 
we get deg A^^'^+^°'> (x) = deg A'^^'^^x) + jo- We try to 
choose jo as small as possible, and in most situations it is 
actually possible to have jo = 2, hence we do not intensively 
study the case when compensation is not immediately possible. 
Additionally, if A(2)(ai) = or A(2)(q:2) = 0, the updating 
of A'^2) (2;) has to be performed in a different way. Yet a closer 
look at the polynomials shows, that in this case it is sufficient 
to set A(2^J+i)(x) = {x - ai)A(2j)(x) if A(2)(a2) = and 
vice versa. This might result in a polynomial of smaller degree 
than the intended one, but it is more important that the degree 
of the polynomial is not too large. 

Before we study the updating procedures in the special cases 
indicated above, it should be noted that no further cases than 
the ones described before need to be distinguished. Because 
the auxiliary polynomials u'-^^^^{x) and u^j^{x) fulfill the 
relation Q 

yO) (a;) _ u(i-i) (^x) = ±1, (25) 



where the v^J'>{x) can also be calculated recursively in the 
EEA, but are not needed for decoding RS codes. The great- 
est common divisor (gcd) of two polynomials calculated in 
consecutive iterations of the EEA is 1, and so this is true for 
A(^'°^(x) and A^'^'^^x). Of course, in the further iterations, 
the gcd of A(^'^'(a;) and A'^^'^^x) will at least have roots 
at all positions in Xj. Indeed, close examination shows that 
the gcd contains exactly these roots and no further common 
factor. 

To illustrate this with an example, we will explicitly calcu- 
late the gcd for regular updating in the first GMD iteration. 
For the further iterations as well as the other cases described 
later on, this claim can be verified in a similar manner. First, 
we take a look at the proof for (IZST i as given in pl . There, the 
calculation of the auxiliary polynomials is written in matrix 
form as 

1 0/ ■ I 1 0/ ■■• I 1 Oj 



(26) 



and taking the determinant on both sides immediately gives 
the relation (|25] l. To extend this to our approach, we also use 
the matrix representation, namely 



p(i)(a;) p^^Hx) 



.(3) 



p(''^{x) p^^\x) 



jU) 1 



(27) 



with polynomials p^*) (x) that are not used in our algorithm. 
For the first iteration, i.e. j = 1, we substitute (l26l l for the 
last step of the classical decoding procedure into dZTl i. and by 
taking the determinant we obtain 

iS^\x)p''^Hx) - w(^-i)(a;)p(^)(x) = q^^^x) ■ q<^^\x) - a, 

(28) 

the right hand side possibly multiplied by —1. Since we know 
that the gcd includes the factors {x — ai) and {x — 02), the 
gcd cannot have degree less than 2. On the other hand, the 
right hand side of ( l28T l is a polynomial of degree 2, and it is 
a multiple of the gcd. Hence the gcd has degree at most 2, so 
it is immediately clear that the gcd consists of exactly the two 
factors given, in particular no root at any value that is to 
be erased in a later iteration, is contained in the gcd. 

Now we will turn to the special cases, where the updating 
rule ( fT9] l cannot be used. First, we study the case given 
in (|24li. Due to the fact that A(^)(.t) and A(^)(a;) are co- 
prime, we have A^^-^^ai) ^ 0,A(i^^)(a2) 7^ 0. In such a 
case, (x + &)A'^'^^(x) can only have a root at one of the 
required zeros, and adding a multiple of A'^'^^(a;) cannot 
bring either position to zero. Therefore, we choose to set 
deg A(i^^+i'(a;) deg A^^'^^x) + 2. Then it is easy to find 
the updating rules 

A(iJ+i)(a;) ^ (x - ai)(.T - a2)A<^^'^'>{x), 

In the next iteration, the decoder should try to compensate for 
this decision. The thought leading to the result is the following: 
If we check how the polynomial A'^'-'+2' (.t) is composed of 
A(ij)(a;) and A'^^'^^x) for regular updating, we find that the 



(29) 



first is multiplied by a polynomial of degree 2 and the latter 
by a polynomial of degree 1. We therefore set 



A(iJ+2)^^^ ^ (a; + a)A(2J+i)(a;) +6A(i'^'+i)(a;), 
A(2J+2)(2;) = {x- ai){x - a2)A(2-J+i)(a;), 



(30) 



which in combination with (I29b gives the desired degrees for 
two updating steps. A'-^'^^^^x) has the desired zeros if 



A(i)(ai)A(2)(a2)ai - A^i) (a2)A(2) (ai) 



a2 



b = 



A(i)(ai)A(2)(a2) - A(i)(a2)A(2)(ai) 
A(2)(ai)A(2)(a2)(ai -02) 



(31) 



A(i)(ai)A(2)(a2) - A(i)(a2)A(2)(ai) ' 

we abbreviated A^^) = A^^'^+i) and A(2) A(2^J+i). 

If A(ij)(ai)A(2j)(a2) - A^^ (a2)A(2j) (ai) = with- 
out any of the involved terms being zero, we perform the up- 
date of A(i)(a;) as in (l29T l. However, the updating of A'^^^lx) 
still is done according to (l2Tl i. since (of course) A(2 j) (^x) does 
not yet have the required zeros. After the compensation step, 
A(2)(2;) will then have the same degree as A''^^{x). However, 
recursive substitution, in order to get A^^)(a;) in dependence 
of A(^'"^(a;) and A'^2-0)^2;) shows that these polynomials are 
multiplied by the intended degree in A^^^ {x), so this fact does 
not cause major problems, and simulations have shown that 
correct decoding is actually achieved with this setup. 

The last special case that needs to be taken into account 
is A'^i--')(ai) = A'^i--')(a2) = 0. Here, there is no need to 
update A'^'(.t), but forcing the zeros in A(2'-J+i) (x) is not 
possible with the formula given in ^ZT[ : The solution in (|22] | 
is valid, but the fact that a = b = implies that A'2j)(x) 
is discarded, hence all further solutions would be multiples of 
A(i (a;), which is not wanted. Therefore, we use the updating 
rules 

A(iJ+i)(a;) = A(ij)(a;), 
A(2.j+i)(2.) ^ „ _ a2)A(^'^')(.T). 

The compensation step then is given as 

A(iJ+2)(^) = (x - ai)ix - a2)A^^-^+^\x), 
A(2j+2)(^) = aA(2.J+i)(x) -{x + b)A^'-^+'\x), 
where 

A(i)(ai)AW(a2)(ai -02) 



(32) 



(33) 



A(i)(a2)A(2)(ai) - A(i)(ai)A(2)(a2) 
A(i)(ai)A(2)(a2)ai - A(i) (a2)A(2) (ai)a2 



(34) 



A(i)(a2)A(2)(ai) - A(i) (ai)A(2) (a2) ' 

Performing the compensation steps, both that in ( l30b and 
in ( |33] | isn't always possible either. The situations in which 
compensation fails are actually the same as those where 
regular updating fails. Consequently, the same special updating 
rules are used again in this cases. If the same rule is used 
twice, two compensation steps are required later on. On the 
other hand, ( |29] | and (l32b serve as compensation steps for 
each other. Further, compensation is possible but should not be 
performed in (O if A(2.J+i) (q-i) or A(2J+i)(a2) is zero: In 
this case, by performing the compensation step, one discards 



the polynomial A(^'^+^)(x), and all error locator polynomials 
obtained further are multiples of A(^'^+^)(a:;) which is not 
wanted. Therefore, it is better to perform regular updating in 
this situation and try compensation in the next iteration. The 
same holds if the compensation in ( |33] ) is to be performed and 
A(iJ+i)(ai) = or A(i'J+i) (aa) - 0. 

The situation in these special cases is a little differ- 
ent if q^^'>{x) exists. As mentioned before, the updating 
can be written to avoid the division in the calculation of 
the coefficients - such a case is equivalent to multiplying 
both A(^'-'^(.t) and A'^'^'^^x) by a constant. As a result, 
A(i.i+i)(x) = cA(2J+i)(a;) with constant c would be ob- 
tained, and in the next iteration, forcing more zeros would 
result in A'^^'''+^) (x) = 0. This is still true for the changed def- 
inition of A^^'^'>{x), and so updating is best done as presented 
before. However, because we used the term g^^^ {x)u^^^ (x) in 
the definition of A'^^'°^ (x), in these cases another solution may 
be obtained: As long as the constant multiplied to A^^''''>{x) is 
not zero, the result includes a term ai -x^A^^'^^x) with i > 1. 
Therefore, in such cases an additional solution - of the form 
A(iJ+i)(a:) = aA(2j)(a;) + bA^^-'^'> (x) - is a valid solution 
and therefore it is stored, increasing the maximum list size at 
the decoder output. 

We conclude this section by sketching how the formulas 
given for the GMD extension interact as an algorithm. We 
set A := A(i)(ai)A(2)(a2) - A^^\a2)A^^'> (ai) to obtain a 
shorter notation. The variable dd introduced in the algorithm 
is used to keep track of the special updatings performed. 

Algorithm 1; GMD extension 

Input: Polynomials A^^^^^x), A^^'°'>{x), 
erasure sets Xj 

Output: List C of candidate error locators 
InitiaUzation: j = 0, dd = 0, C = {A^'^^°\x)} 
while deg A^^'-J) (x) < d - 2 do 
calculate A from Xj^i \ Xj 
if dd = and A f then 
I update according to iT% and ( |2TI ) 
else if A = then 

perform special updating and adjust dd: 
^ =^ dd = dd+l 
^ ^ dd = dd- 1 
else if > (and A ^ 0) then 
I perform compensation step (|30] |, dd ^ dd — 1 
else if < (and A 0) then 
I perform compensation step (l33T l. dd — dd+ 1 
end 

store A(i'J+i)(2;) in C 
j=j + l 

end 



IV. Selection OF THE Best Solution 

In this section, we shortly discuss how to select the best 
solution from the list of candidate error locators. Although 
the distance criteria used in most cases are trivial, the straight- 
forward approach requires to perform error evaluation for all 



0{d) candidate error locators, with a complexity of 0{n^) 
each. Hence, in this straightforward approach the overall 
complexity is 0{n^) and determined by the evaluation step. 

The method suggested by Kotter ([T] is to use evaluation 
vectors instead of polynomials during the algorithm. Instead 
of using the polynomials, evaluation vectors are calculated in 
the initialization to the GMD extension. In these vectors, every 
component corresponds to the evaluation of the polynomial at 
a certain field value, i.e. we substitute 



(35) 



and so on. Consequently, polynomial multiplications are re- 
placed by elementwise vector multiplications, e.g. 

x-p{x)^ [p{l),ap{a),a^pia^),...,a"-^p{a"-^)] . (36) 

The evaluation of a polynomial is now simply the extraction 
of one component from a vector It can be verified that the 
complexity of the main step, namely finding all candidate error 
locators, can still be performed with a complexity of 0{n^). 
Further, the selection of the best solution is now also possible 
with complexity 0{n^): Using a weighted hamming metric, 
it is only important which positions are in error, while the 
actual error value is not important. Since these positions can 
be easily extracted from the evaluation vectors of the candidate 
polynomials - the positions where the evaluation vectors are 
zero - the complexity of calculating the weighted Hamming 
weight of a single candidate is therefore only 0{n), and so 
finding the best solution among 0{d) candidates can be done 
with complexity 0{n'^). 

V. Summary and Conclusion 

We presented a method that is capable of performing 
Generalized Minimum Distance decoding of RS codes with 
an overall complexity of 0{n'^). A method that exhibits the 
same performance had already been introduced by Kotter in 
1996 |[T]. This is not surprising, since Kotters algorithm ex- 
tends the Berlekamp-Massey algorithm, and ours the extended 
Euclidean algorithm, and these two algorithms are known to 
be equivalent for decoding up to half the minimum distance. 
However, having a different problem formulation and erasing 
strategy, we do not always have the same intermediate results. 
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